Macagram by Luis Services
Last updated: June 12, 2026
When you create an account on Macagram, we store your username and a bcrypt-hashed password. You may optionally provide an email address. All data is stored locally on your private server at /Volumes/drive./users.db.
Posts, images, videos, and messages you create are stored in the same local database and on the server's file system. Nothing is sent to third parties.
If you register a passkey, the public key credential is stored in the local database. The private key never leaves your device. Passkey authentication uses your device's biometric sensor (Touch ID, Face ID, or PIN).
Login creates a session cookie (connect.sid) valid for 7 days. It contains no personal data — just a random session ID. The cookie is httpOnly and uses sameSite: lax for security.
If you use the Discord integration, chat messages and game events are forwarded to your designated Discord server via a bot and webhook. Only the messages you explicitly send are transmitted. The bot does not store messages.
The optional presence feature lets you manually share your battery percentage and online status. This data is stored temporarily in server memory (cleared after 5 minutes of inactivity). It is never written to disk.
Passwords use bcrypt (10 salt rounds). Communications use HTTPS via Cloudflare tunnel when accessed remotely. The server runs on your local network. Keep your server password and SSH keys secure.
This service is self-hosted. For privacy concerns, contact the server administrator (you).